GnuTLS certificate verification vulnerability announced (CVE-2014-0092)

Re:GnuTLS certificate verification vulnerability announced (... by blueskin_ on Tuesday March 04, 2014 @05:39AM (#7339458)

Again, I find myself wondering "Why not just use OpenSSL instead?"

[ Parent | on HN ]

Re:GnuTLS certificate verification vulnerability announced (... by rweir on Tuesday March 04, 2014 @07:52AM (#7339852)

perhaps read any of the other comments? tldr, license and it's also terrible.

[ Parent | on HN ]

Re:GnuTLS certificate verification vulnerability announced (... by blueskin_ on Tuesday March 04, 2014 @09:30AM (#7340325)

OpenSSL seems to have a less restrictive licence to me (although I suppose it is an issue if you want to directly integrate it with GPL code, but that's why it's a library), and I somehow wouldn't expect a bug of this magnitude to make it past their review.

[ Parent | on HN ]